web-search-jina

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is simple Jina web search, but it requires reading Gooseworks credentials and routes all requests through Gooseworks proxy endpoints instead of official Jina paths. The install path is not overtly malicious and appears same-org/registry-based, but the credential handling and intermediary data flow are broader than necessary for the claimed function.

Confidence: 88%Severity: 64%
Audit Metadata
Analyzed At
Jun 19, 2026, 10:46 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fweb-search-jina%2F@72be2d7fd71d1c29610ccddd0fe2a62ee0c652fb2e86f50cb0b6da20442b1f32
Security Audit — socket — web-search-jina